StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,615
of 18,219 indexed, latest versions
Container images
6,523
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,615 of 18,219 indexed charts deploy, on 6,523 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,286
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1699
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1067
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,615 by stars
ChartLatestAffected imagesRadar Score
opentelemetry-ebpf-instrumentationopentelemetry-helmOfficialVerified publisher0.15.21 of 1See more

opentelemetry-ebpf-instrumentation opentelemetry-helm 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.15.2101b5c773ac8
stdlib@go1.27.0
1.26.10

Open the chart page →

164
oesopsmxVerified publisher4.0.328 of 25See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
stdlib@go1.17.2
1.26.10
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
stdlib@go1.16.15
1.26.10
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
stdlib@go1.20.3
1.26.10
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
stdlib@go1.19.1
1.26.10
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
stdlib@go1.24.11
1.26.10
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
ca-certificates@20251003-r0
stdlib@go1.25.5
20260909-r3
1.26.10
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
stdlib@go1.22.2
1.26.10
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
stdlib@go1.13.1
1.26.10

Open the chart page →

113,160
pacto-operatorpacto-operatorOfficialVerified publisher6.0.11 of 1See more

pacto-operator pacto-operator 6.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/trianalab/pacto/operator:6.0.1fbc757a5fd9f
stdlib@go1.26.9
1.26.10

Open the chart page →

31
ipfs-clusterparadeum-teamVerified publisher0.0.192 of 2See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ipfs/go-ipfs:v0.13.117259397f587
stdlib@go1.18.3
1.26.10
ipfs/ipfs-cluster:1.0.21511f6d57994
stdlib@go1.18.3
1.26.10

Open the chart page →

5,826
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestf6523ff48db1
stdlib@go1.26.9
1.26.10

Open the chart page →

3,462
permifypermifyVerified publisher0.5.01 of 1See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
ca-certificates@20241121-r1
stdlib@go1.22.4
20260909-r3
1.26.10

Open the chart page →

1,626
persespersesOfficialVerified publisher0.23.31 of 1See more

perses perses 0.23.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
persesdev/perses:v0.54.0a0e34ddaf9d7
stdlib@go1.26.5
1.26.10

Open the chart page →

490
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
stdlib@go1.24.3
1.26.10

Open the chart page →

3,795
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
stdlib@go1.21.6
1.26.10

Open the chart page →

2,099
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
stdlib@go1.13.10
1.26.10

Open the chart page →

4,430
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
stdlib@go1.20.3
1.26.10

Open the chart page →

2,946
prometheus-memcached-exporterprometheus-communityVerified publisher0.6.01 of 1See more

prometheus-memcached-exporter prometheus-community 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/memcached-exporter:v0.17.0995c80e3ffbe
stdlib@go1.26.6
1.26.10

Open the chart page →

280
prometheus-pgbouncer-exporterprometheus-communityVerified publisher0.10.11 of 1See more

prometheus-pgbouncer-exporter prometheus-community 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/pgbouncer-exporter:v0.12.130f31b6c2efd
stdlib@go1.26.4
1.26.10

Open the chart page →

613
prometheus-systemd-exporterprometheus-communityVerified publisher0.5.21 of 1See more

prometheus-systemd-exporter prometheus-community 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/systemd-exporter:v0.7.078c03f875dfb
stdlib@go1.24.1
1.26.10

Open the chart page →

1,293
prometheus-yet-another-cloudwatch-exporterprometheus-communityVerified publisher0.48.01 of 1See more

prometheus-yet-another-cloudwatch-exporter prometheus-community 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/yet-another-cloudwatch-exporter:v0.68.0651b4041d9c3
stdlib@go1.26.8
1.26.10

Open the chart page →

160
kube-prometheus-stackprometheus-worawutchan12.8.04 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
stdlib@go1.15.1
1.26.10
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
stdlib@go1.15.3
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
stdlib@go1.14.12
1.26.10
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.10

Open the chart page →

17,413
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
stdlib@go1.24.0
1.26.10

Open the chart page →

6,392
nfs-server-provisionerraphaelVerified publisher1.3.01 of 1See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
stdlib@go1.15
1.26.10

Open the chart page →

4,008
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
stdlib@go1.18.2
1.26.10

Open the chart page →

14,790
wordpress-hardenedriotkit-org2.0.02 of 2See more

wordpress-hardened riotkit-org 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/waf-proxy:snapshot683656fdace2
stdlib@go1.18.3
1.26.10
ghcr.io/riotkit-org/wordpress-hardened:v2.0edc6b69873be
stdlib@go1.17.9
1.26.10

Open the chart page →

8,699
backrestrobertobochetVerified publisher0.7.01 of 1See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
garethgeorge/backrest:v1.14.1b85297975428
stdlib@go1.26.0
1.26.10

Open the chart page →

1,364
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.0cd66986a2a49
stdlib@go1.24.4
1.26.10

Open the chart page →

2,810
supabaserock8sVerified publisher0.0.61 of 1See more

supabase rock8s 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.10

Open the chart page →

715
rqliterqliteOfficialVerified publisher2.0.01 of 1See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rqlite/rqlite:9.1.37b992a526eee
stdlib@go1.25.3
1.26.10

Open the chart page →

1,833
qbittorrent-vpnrtomik-helm-chartsVerified publisher0.0.21 of 2See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.40.02b42bfa04675
stdlib@go1.23.4
1.26.10

Open the chart page →

1,804
sabliersablier-helm-chartsOfficialVerified publisher1.8.11 of 1See more

sablier sablier-helm-charts 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sablierapp/sablier:1.16.1413704376656
stdlib@go1.26.3
1.26.10

Open the chart page →

502
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
stdlib@go1.18.1
1.26.10

Open the chart page →

4,651
seaweedfs-csi-driverseaweedfs-csi-driver0.2.407 of 7See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.40

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
chrislusf/seaweedfs-csi-driver:v1.4.341fca534c9001
stdlib@go1.26.8
1.26.10
chrislusf/seaweedfs-mount:v1.4.347c6250e96001
stdlib@go1.26.8
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
stdlib@go1.20.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
stdlib@go1.20.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
stdlib@go1.20.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
stdlib@go1.20.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
stdlib@go1.20.3
1.26.10

Open the chart page →

9,273
seldon-core-operatorseldon1.19.01 of 1See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
stdlib@go1.24.11
1.26.10

Open the chart page →

1,454
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
stdlib@go1.23.10
1.26.10

Open the chart page →

1,811
lldapself-hosters-by-nightVerified publisher0.5.22 of 2See more

lldap self-hosters-by-night 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
stdlib@go1.24.6
1.26.10
ghcr.io/lldap/lldap:2025-05-193de697c3ba57
stdlib@go1.18.2
1.26.10

Open the chart page →

5,005
appshini4iVerified publisher0.4.01 of 1See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:v1.10.21474027c3166
stdlib@go1.22.2
1.26.10

Open the chart page →

1,128
skypilotskypilotOfficialVerified publisher0.14.13 of 3See more

skypilot skypilot 0.14.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.125577df35586
rustls-webpki@0.103.14
stdlib@go1.26.2
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
stdlib@go1.24.4
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
stdlib@go1.24.4
1.26.10

Open the chart page →

6,484
corednssoftizyVerified publisher0.2.01 of 1See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coredns/coredns:1.10.1a0ead06651cf
stdlib@go1.20
1.26.10

Open the chart page →

2,581
knative-servingsoftonic3.0.05 of 5See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned873b968f02b5
stdlib@go1.14.2
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinneda5de0fb75046
stdlib@go1.14.2
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned2ef460356b17
stdlib@go1.14.2
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
stdlib@go1.14.2
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedf16c0e022203
stdlib@go1.14.2
1.26.10

Open the chart page →

19,047
forecastlestakaterVerified publisher2.1.31 of 1See more

forecastle stakater 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
stakater/forecastle:v2.0.2382cd9572352
stdlib@go1.26.4
1.26.10

Open the chart page →

1,141
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
stdlib@go1.24.13
1.26.10

Open the chart page →

1,028
tigera-operatorstevehipwellVerified publisher2.15.01 of 1See more

tigera-operator stevehipwell 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10

Open the chart page →

231
vertical-pod-autoscalerstevehipwell-helm-charts-vertical-pod-autoscalerVerified publisher1.12.13 of 3See more

vertical-pod-autoscaler stevehipwell-helm-charts-vertical-pod-autoscaler 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10

Open the chart page →

1,137
sn-platformstreamnative1.11.466 of 9See more

sn-platform streamnative 1.11.46

6 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.10
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.26.10
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
stdlib@go1.17.11
1.26.10
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
stdlib@go1.19.4
1.26.10
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.10
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
stdlib@go1.19.7
1.26.10

Open the chart page →

76,871
stunnerstunner1.2.12 of 2See more

stunner stunner 1.2.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.2.10d2094060b72
stdlib@go1.26.4
1.26.10
l7mp/stunner-gateway-operator:1.2.10ea40a1d42d5
stdlib@go1.26.4
1.26.10

Open the chart page →

971
pocketbasetechwolf12Verified publisher0.29.31 of 1See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
stdlib@go1.24.6
1.26.10

Open the chart page →

2,125
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10

Open the chart page →

10,080
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
stdlib@go1.24.4
1.26.10

Open the chart page →

4,889
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.263 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
stdlib@go1.20.5
1.26.10
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
stdlib@go1.19.12
1.26.10
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
stdlib@go1.19.12
1.26.10

Open the chart page →

18,149
feedbacksystemthm-mni-iiVerified publisher0.48.311 of 14See more

feedbacksystem thm-mni-ii 0.48.3

11 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
stdlib@go1.21.5
1.26.10
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
bitnamilegacy/mysql:8.0.35-debian-11-r2be03e8ea6129
stdlib@go1.21.5
1.26.10
library/docker:20.10.21-dind3153fa63f546
stdlib@go1.18.7
1.26.10
ghcr.io/thm-mni-ii/fbs-core:v2.0.918e54463756e
stdlib@go1.26.7
1.26.10
ghcr.io/thm-mni-ii/fbs-core-web:v2.0.9daeca3604040
stdlib@go1.26.8
1.26.10
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.945929f5c1a12
stdlib@go1.26.7
1.26.10
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.9083d81d517e7
stdlib@go1.20.12
1.26.10
ghcr.io/thm-mni-ii/fbs-runner:v2.0.9ffaf49a4d687
stdlib@go1.20.11
1.26.10
ghcr.io/thm-mni-ii/fbs-sql-playground-web:v2.0.9806d28c6fac0
stdlib@go1.26.8
1.26.10
ghcr.io/thm-mni-ii/fbs-web-shell:v2.0.9939ec6417e01
stdlib@go1.26.8
1.26.10

Open the chart page →

30,407
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
stdlib@go1.24.2
1.26.10

Open the chart page →

2,401
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
stdlib@go1.14.4
1.26.10

Open the chart page →

6,098
traefik-meshtraefikOfficialVerified publisher4.1.13 of 7See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
stdlib@go1.14.4
1.26.10
library/traefik:v2.57d5a6ae66572
stdlib@go1.17.6
1.26.10
traefik/mesh:v1.4.8cf071f3e165c
stdlib@go1.19
1.26.10

Open the chart page →

13,393
ttl-controllerttl-controllerVerified publisher1.9.11 of 1See more

ttl-controller ttl-controller 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ttl-controller/ttl-controller:1.9.18092dd72f073
stdlib@go1.27.0-X:nodwarf5
1.26.10

Open the chart page →

238

Container images carrying it

6,523 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
oryd/oathkeeper:v0.40.6e8cb9b79a89c
stdlib@go1.20.5
1.26.10
2
osixia/openldap:1.4.0ccd95cc6e61e
stdlib@go1.13.4
1.26.10
2
otel/opentelemetry-collector-contrib:latest1175b0300305
stdlib@go1.26.9
1.26.10
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.26.10
2
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
stdlib@go1.25.7
1.26.10
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
stdlib@go1.23.2
1.26.10
2
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.10
2
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
stdlib@go1.26.4
1.26.10
2
pgautoupgrade/pgautoupgrade:18-alpine516a55460258
stdlib@go1.24.6
1.26.10
2
pgsty/mc:RELEASE.2026-09-16T00-00-00Zcfc83108c3ab
stdlib@go1.27.1
1.26.10
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
stdlib@go1.24.6
1.26.10
2
phntom/kochi:1.1.33b82358bd56e
stdlib@go1.15.5
1.26.10
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.26.10
2
postgis/postgis:15-3.3a2fc46b52819
stdlib@go1.18.2
1.26.10
2
pottava/s3-proxy:2.020a0bcb15f76
stdlib@go1.13.7
1.26.10
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
stdlib@go1.15.2
1.26.10
2
prom/graphite-exporter:latestc1a266f63a84
stdlib@go1.26.5
1.26.10
2
prom/memcached-exporter:v0.17.0995c80e3ffbe
stdlib@go1.26.6
1.26.10
2
prom/prometheus:v2.17.242d2395cd719
stdlib@go1.13.10
1.26.10
2
prom/prometheus:v2.52.05c435642ca4d
stdlib@go1.22.3
1.26.10
2
prom/prometheus:v2.37.98176adea328e
stdlib@go1.19.11
1.26.10
2
prom/prometheus:v2.48.1a67e5e402ff5
stdlib@go1.21.5
1.26.10
2
prom/prometheus:v2.21.0d43417c260e5
stdlib@go1.15.2
1.26.10
2
prom/prometheus:v2.16.0e4ca62c0d62f
stdlib@go1.13.8
1.26.10
2
prom/pushgateway:v1.3.0c0d39b8d4cfe
stdlib@go1.15.2
1.26.10
2
qmcgaw/ddns-updater:2.10.0:v2.10.03e2aa558946b
stdlib@go1.26.2
1.26.10
2
questdb/questdb:10.0.167eaed863ebb
stdlib@go1.25.14
1.26.10
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
stdlib@go1.19.4
1.26.10
2
rancher/kine:v0.11.412889bbcd1e8
stdlib@go1.21.5
1.26.10
2
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10
2
rancher/local-path-provisioner:v0.0.3534ff0847cc47
stdlib@go1.26.1
1.26.10
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
stdlib@go1.22.5
1.26.10
2
rclone/rclone:1.6874c51b8817e5
stdlib@go1.23.3
1.26.10
2
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
stdlib@go1.18.3
1.26.10
2
rookout/controller:latest4451a6f6b8ec
stdlib@go1.20.5
1.26.10
2
rookout/data-on-prem:latest51c0fce64467
stdlib@go1.20.5
1.26.10
2
rotationalio/quarterdeck:0.18.12b370645d64f
stdlib@go1.26.9
1.26.10
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
stdlib@go1.21.3
1.26.10
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
stdlib@go1.21.3
1.26.10
2
safeglobal/safe-config-service:latest09a5e495c219
rustls-webpki@0.103.13
webpki-root-certs@1.0.7
0.103.16
1.0.10
2
safeglobal/safe-transaction-service:latest7b576c73f865
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
stdlib@go1.15.2
1.26.10
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
stdlib@go1.21.4
1.26.10
2
shlinkio/shlink:5.1.7:stable844e1f2b6455
stdlib@go1.26.4
1.26.10
2
sikalabs/hello-world-server:latest5f49bf889a64
stdlib@go1.26.2
1.26.10
2
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.26.10
2
starrocks/operator:v1.11.78c20435a7579
stdlib@go1.22.12
1.26.10
2
statping/statping:v0.90.74e874da513a5c
stdlib@go1.14.13
1.26.10
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.26.10
2
supporttools/go-web-cache:v1.3.2f4f775dd43b9
stdlib@go1.21.6
1.26.10
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.